If They Resigned on Monday Morning: Auditing the People Your Business Secretly Depends On

Every business owner has one. The sales director whom three of your five biggest clients ask for by name. The finance manager who is the only person who understands how the payroll reconciliations actually work. The operations lead who holds the relationship with the contract manufacturer in Birmingham that no one else has ever spoken to directly.

None of this is a problem — until it is. A resignation letter on a Monday morning, a serious illness, or a dispute that ends badly can convert a quiet dependency into an operational crisis within days. The question is not whether your business relies on particular individuals. It is whether you have ever measured how much.

What Key Person Risk Actually Looks Like

Key person risk is often assumed to be a problem for large corporates with insurance departments. In practice, it bites hardest in small and mid-sized UK businesses, where role boundaries are blurred and knowledge is rarely written down. The exposure typically concentrates in three areas:

Client relationships. Where a single individual owns the commercial relationship, the client's loyalty is often to the person, not the firm. This is especially common in professional services, wholesale and B2B supply, where years of informal goodwill are banked in one person's phone contacts.

Operational knowledge. Unwritten processes are the classic small-business vulnerability. The booking system only works if you restart it a certain way. The supplier gives preferential terms because of a handshake arrangement no one documented. None of it survives the departure of the person who holds it in their head.

Financial control. In many SMEs, one person manages banking mandates, HMRC correspondence, VAT filings and the company credit cards. If that person disappears abruptly, you may find yourself locked out of your own accounts at precisely the moment cash flow needs close attention.

Running the Audit: Three Functions, One Framework

A credible audit does not need external consultants or a month of workshops. It needs honest answers to four questions, asked function by function.

1. Who would we call first? For each function — sales, operations, finance — identify the person the business would turn to on day one of their absence. Be honest. The answer is frequently not the person with the most senior title.

2. What do they know that no one else does? List the knowledge that exists only in their head: passwords and mandates, supplier terms, client histories, unwritten processes. Anything on this list is a documentation task.

3. Who would the clients ask for? Map your top ten accounts against the individuals who hold those relationships. If more than a third route through one person, you have concentration risk that no insurance policy will fully cover.

4. How long would recovery take? Estimate, in weeks, how long it would take to restore normal service if the person left tomorrow. Anything beyond eight weeks in a core function deserves board-level attention.

Reducing the Exposure: Documentation, Cross-Training and Insurance

Once the audit is complete, mitigation falls into three strands, and they work in sequence rather than in isolation.

Documentation. Require that critical processes, credentials and contact structures are recorded and stored securely — not in a personal notebook or a desktop folder only one person can access. This is unglamorous work, and it is the single highest-return action on the list.

Cross-training and relationship dilution. Ensure a second person attends key client meetings at least occasionally, and rotate internal ownership of supplier relationships. Clients will not object to meeting the wider team; indeed, it often signals a well-run business.

Key person insurance. For genuinely irreplaceable individuals, key person cover can provide the business with a cash cushion to fund recruitment, retention or a transition period while trading stabilises. It is not a substitute for the first two strands — but where a loss would create immediate financial strain, it is worth a conversation with your broker.

A Checklist to Start With

Use the following as a working template across your three core functions:

• Name the individual(s) who would be called first in each function
• List all systems, accounts and mandates only they can access
• Identify top ten client accounts and the person who owns each relationship
• List undocumented processes and assign an owner to document each
• Confirm a named deputy exists for payroll, HMRC and banking access
• Estimate recovery time for each function and flag anything over eight weeks
• Review annually, or immediately after any organisational change

The uncomfortable truth about key person risk is that it feels manageable right up until the moment it isn't. A two-hour audit, repeated annually, will not make your best people less valuable — but it will make your business less fragile.